content/base/crashtests/700090-1.html

changeset 0
6474c204b198
     1.1 --- /dev/null	Thu Jan 01 00:00:00 1970 +0000
     1.2 +++ b/content/base/crashtests/700090-1.html	Wed Dec 31 06:09:35 2014 +0100
     1.3 @@ -0,0 +1,32 @@
     1.4 +<!DOCTYPE html>
     1.5 +<html>
     1.6 +<head>
     1.7 +<script>
     1.8 +
     1.9 +function boom()
    1.10 +{
    1.11 +  var mo = document.createElementNS("http://www.w3.org/1998/Math/MathML", "mo");
    1.12 +  var t1 = document.createTextNode("123456 ");
    1.13 +  mo.appendChild(t1);
    1.14 +  document.body.appendChild(mo);
    1.15 +  var t2 = document.createTextNode("x");
    1.16 +  document.body.appendChild(t2);
    1.17 +
    1.18 +  var r1 = document.createRange();
    1.19 +  r1.setEnd(t1, 7);
    1.20 +  var r3 = document.createRange();
    1.21 +  r3.setStart(t1, 7);
    1.22 +
    1.23 +  document.documentElement.offsetHeight;
    1.24 +
    1.25 +  var r2 = document.createRange();
    1.26 +  r2.setStart(t1, 0);
    1.27 +  r2.setEnd(t2, 0);
    1.28 +  r2.deleteContents();
    1.29 +}
    1.30 +
    1.31 +</script>
    1.32 +</head>
    1.33 +
    1.34 +<body onload="boom();"></body>
    1.35 +</html>

mercurial